Poland strengthens cybersecurity through new regulations and academic models

Poland is implementing significant cybersecurity measures across various sectors. Following the implementation of the EU's NIS2 directive, approximately 38,000 organizations, including 27,000 public entities, face new responsibilities for managing cyber risks and reporting incidents to CSIRT teams.

A new draft regulation from the Ministry of Digital Affairs aims to establish clear criteria for public entities and local governments to identify and report serious cyber incidents. These thresholds will be based on factors such as system downtime, the scale of data breaches, financial losses, and potential impacts on life or health.

In the academic sector, a new report presented at the University of Silesia emphasizes the need for a federated cybersecurity structure. This model seeks to balance high security requirements with the open nature of scientific research, proposing a hierarchy that includes a sectoral CSIRT for science and regional security operation centers.

These developments come amid rising threats in Poland, which remains one of the most frequently attacked countries in Central and Eastern Europe. Recent data indicates a significant increase in cyberattacks, with phishing and ransomware targeting both large corporations and small to medium-sized enterprises.